+49 (0) 7022 2796-682
DATA PROTECTION

PRIVACY STATEMENT

1. Data protection at a glance

General information
The following information in this clause 1. provides a clear overview of what happens to your personal data when you visit this web site. Personal data are all data using which you can be identified personally. You will find detailed information on the topic of data protection from clause 2. of this privacy statement.

Data collection on this web site

Who is responsible for data collection on this web site?
On this web site, data processing is undertaken by the person responsible. You will find this person's contact data in clause 3 of this privacy statement.

How do we collect your data?
On the one hand, your data are collected because you provide your data to us. These data can relate, e.g., to data you enter on a contact form.

Other data are collected automatically or after your consent during your visit to our web site by our IT systems. These data are above all technical data (e.g. web browser, operating system or time the page was viewed). These data are collected automatically as soon as you visit this web site.

For what do we use your data?
Some of the data are collected to ensure the correct provision of the web site. Other data can be used to analyse your user behaviour.

What rights do you have in relation to your data?
You have the right, at any time, to obtain, free of charge, information about the origin, recipient and purpose of your personal data saved. You also have the right to request the correction or erasure of these data or to object to the processing of your data. If you have granted your consent to the processing of your data, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request from us the restriction of the processing of your personal data. You also have a right to lodge a complaint with the responsible supervisory authority.

On these topics and if you have any other questions about the topic of data protection, you can contact us at any time at the address stated in clause 3.

Analytical tools and tools from third party providers
Your surfing behaviour may be evaluated statistically during your visit to this web site. This evaluation is undertaken using so-called analysis programs; however only if you provide your consent.
You will find detailed information about these analysis programs in clause 5 of this privacy statement.

2. Hosting and Content Delivery Networks (CDN)

External hosting
This web site is hosted by an external service provider (hoster). The personal data that are collected on this web site are saved on the hoster's servers. Primarily, these data are IP addresses, contact requests, metadata and communication data, contract data, contact data, names, web site accesses and other data generated via a web site.

The hoster is used for the purpose of the performance of a contract in relation to our potential and existing customers (art. 6 para. 1 lit. b GDPR) and in the interest of the secure, fast, efficient provision of our online services by a professional provider (art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to meet the hoster's service obligations and will follow our instructions in relation to these data.

Conclusion of a contract via order processing
We have concluded a contract about order processing with our hoster to ensure processing in compliance with data protection.

 

3. GENERAL INFORMATION AND OBLIGATORY INFORMATION

Data protection
The operators of this site take the protection of your personal data very seriously. We treat your personal data as confidential and as per the statutory data protection regulations as well as this privacy statement.

If you use this web site, various items of personal data are collected. Personal data are data using which you can be identified personally. This privacy statement explains which data we collect and for what we use these data. It also explains how this action occurs and its purpose.

We draw your attention to the fact that there may be gaps in data transmission security in the Internet (e.g. while communicating by e-mail). Complete protection of your data against access by third parties is not possible.

Information about the person responsible
The person responsible for data processing on this web site is:

Quality Analysis GmbH
Großer Forst 1
72622 Nürtingen

Telefon: +49 (0) 7022 2796-500
Fax: +49 (0) 7022 2796-511
E-Mail: info@qa-group.com

The person responsible is the natural or legal person which alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Legally required data protection officer
We have nominated a data protection officer for our organisation.

Matthias Just
c/o Quality Analysis GmbH
Großer Forst 1
72622 Nürtingen

Telefon: +49 (0) 7022 2796-666
E-Mail: datenschutz@qa-group.com

Information about the forwarding of data to the USA
On our web site, some of the tools are from organisations based in the USA. If these tools are active, your personal data may be forwarded to the US servers of the related organisation. We draw your attention to the fact that the USA is not a secure third country in the context of EU data protection law. US organisations have the obligation to provide personal data to security authorities and the affected party cannot take legal action against this provision of data. It is therefore not possible to exclude that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for the purposes of surveillance. We have no influence over these processing activities. Data transfers to the USA only occur if you provide your consent. The data transfers are permissible as per art. 49 para. 1 lit. a GDPR.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw any consent you have granted at any time. The legality of data processing that occurred up until your withdrawal remains unaffected.

Right to object to data collection in specific situations as well as direct advertising (art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THESE PROVISIONS. FOR THE RELATED LEGAL BASIS ON WHICH THIS PROCESSING IS BASED, REFER TO THIS PRIVACY STATEMENT. IF YOU OBJECT, WE NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

WHERE YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA ARE THEN NO LONGER USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the responsible supervisory authority
If there are infringements of the GDPR, the person affected has a right to lodge a complaint with a supervisory authority, in particular in the Member State where the person normally resides, of the person's workplace or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative procedures or judicial remedies.

Right to data portability
You have the right to the provision, to you or a third party, in a machine-readable format, of the data that we process based on your consent or while fulfilling a contract. If you request the transfer of the data to another controller, this action is only undertaken if technically feasible.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, for example orders or requests, that you send to the site operator. You can identify an encrypted connection by the change in the address bar of your browser from "http://" to "https://" and the padlock symbol in the bar in your browser.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Access, erasure and correction
In the context of the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your personal data, their origin and recipients and the purpose of the data processing and, if necessary, a right to the correction or erasure of these data. On these topics and if you have any other questions about the topic of your personal data, you can contact us at any time at the address stated in the imprint.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. On this topic, you can contact us at any time at the address stated in the imprint. The right to the restriction of processing exists in the following situations:

  • If you contest the correctness of your personal data stored in our systems, as a rule we need time to check this issue. You have the right to request the restriction of the processing of your personal data for the duration of the check.
  • If your data were/are processed unlawfully, you can request the restriction of processing instead of erasure.
  • If we no longer need your personal data, however you need the data to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
  • If you have objected according to art. 21 para. 1 GDPR, your interests and our interests must be weighed. If it has not yet been identified which interests predominate, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data are only allowed – with the exception of storage – to be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

Objection to advertising e-mails
The usage of the contact data published in the context of our obligations in the imprint or in this privacy statement for the purpose of sending unsolicited advertising and information materials is hereby rejected. The operators of the site expressly reserve the right to take legal action if advertising information, e.g. spam e-mails, is sent unsolicited.

 

4. DATA COLLECTION ON THIS WEB SITE

Cookies
Our web pages use so-called "Cookies". Cookies are small text files and do not cause any damage to your terminal equipment. They are saved on your terminal equipment either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after the end of your visit. Permanent cookies remain saved on your terminal equipment until you delete them or they are deleted automatically by your browser.

Cookies have various functions. Numerous cookies are necessary technically because certain web site functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies necessary to undertake electronic communication processes (necessary cookies) or to provide specific functions you require (functional cookies, e.g. for the shopping basket function) or to optimise the web site (e.g. cookies to measure the web audience) are saved based on art. 6 para. 1 lit. f GDPR, provided no other legal basis is stated. The web site operator has a legitimate interest in the storage of cookies for the technically correct and optimised provision of the web site operator's services. If consent to the storage of cookies was requested, the related cookies are saved exclusively based on this consent (art. 6 para. 1 lit. a GDPR); the consent can be withdrawn at any time.

If you visit our web site, necessary and functional cookies are saved on your terminal equipment for 12 months.

You can configure your browser such that you are informed if cookies are saved and only allow cookies in specific cases, exclude the acceptance of cookies in certain situations or generally exclude them, as well as activate the automatic deletion of cookies when you close your browser. The functionality of this web site may be restricted by the deactivation of cookies.

If cookies from third party organisations or for the purposes of analysis are used, we inform you separately under clause 5. of this privacy statement and only use them if you consent.

Server log files
We collect and automatically save information your browser sends to us in so-called server log files. This information is:

  • Browser type and version
  • Operating system you use
  • Referrer URL
  • Host name of the accessing computer
  • Time of server request
  • IP adress

These data are not combined with other data sources.

These data are collected based on art. 6 para. 1 lit. f GDPR. The web site operator has a legitimate interest in the technically correct depiction and the optimisation of the operator's web site – the server log files must be collected for this purpose.

Contact form
If you send us requests using a contact form, your information from the request form including the contact data stated there are saved by us for the purpose of processing the request and for any further related requests. We do not pass on these data without your consent.

These data are processed based on art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other situations, the processing is based on our legitimate interest in the effective processing of requests sent to us (art. 6 para. 1 lit. f GDPR) or your consent (art. 6 para. 1 lit. a GDPR) if this was requested.

The data you enter on the contact form remain with us until you request erasure, withdraw your consent to storage or the storage of the data is no longer necessary (e.g. after completion of the processing of your request). Mandatory statutory provisions – in particular retention periods – remain unaffected and can prevent erasure.

Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request including all personal data stemming from your request (name, request) are saved and processed in our systems for the purpose of processing your request. We do not pass on these data without your consent.

These data are processed based on art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other situations, the processing is based on our legitimate interest in the effective processing of requests sent to us (art. 6 para. 1 lit. f GDPR) or your consent (art. 6 para. 1 lit. a GDPR) if this was requested.

The data you provide to us in a contact request remain with us until you request erasure, withdraw your consent to storage or the storage of the data is no longer necessary (e.g. after completion of the processing of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected and can prevent erasure.

 

5. Analyse Tools AND ADVERTISING

Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Google Analytics
If you consent, this web site uses Google Analytics, a web analysis service operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies", i.e. text blocks that are saved on your computer and that make it possible to analyse your usage of our web site. The cookies are saved on your computer by Google for up to two years. The information about your usage of this web site produced by a cookie is generally transferred to a Google server in the USA and saved there. On this web site, we have expanded Google Analytics with the code "gat._anonymizeIp();" to ensure your IP address is not collected in its full length, only in a truncated form (so-called IP masking). Although your identification is made more difficult in this manner, it cannot be excluded that Google may combine your IP address with other identification measures and be able to assign the IP address to you.

The legal basis for the data processing is art. 6 para. 1 lit. a GDPR.

You can find information about how Google processes your data in the privacy statement issued by Google: https://policies.google.com/technologies/partner-sites?hl=en

You can also prevent the storage of cookies by means of the corresponding configuration of your browser software; however we draw your attention to the fact that you may not be able to use the full functionality of this web site in this situation. Finally, by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en, you can also prevent the collection of the cookie-generated data related to your utilisation of the web site (incl. your IP address) by Google as well as the processing of these data by Google.


Hotjar
This website utilizes Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool used to analyze your user patterns on this website. Hotjar allows us to for instance record your mouse and scroll movements as well as your click. During this process, Hotjar also has the capability to determine how long your cursor remained in a certain position. Based on this information, Hotjar compiles so-called Heatmaps, that make possible to determine which parts of the website the website visitor reviews with preference.

We are also able to determine how long you have stayed on a page of this website and when you left. We can also determine at which point you suspended making entries into a contact form (so-called conversion funnels).

Furthermore, Hotjar can be deployed to obtain direct feedback from website visitors. This function aims at the improvement of the website offerings of the website operator.

Hotjar uses technologies that make it possible to recognize the user for the purpose of analyzing the user patterns (e.g., cookies or the deployment of device fingerprinting).

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If a corresponding agreement has been requested (e.g., an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; the agreement can be revoked at any time.

Deactivation of Hotjar

If you would like to deactivate the recording of data by Hotjar, please click on the link below and follow the instructions provided under the link: https://www.hotjar.com/opt-out.

Please keep in mind that you will have to separately deactivate Hotjar for every browser and every device.

For more detailed information about Hotjar and the data to be recorded, please consult the Data Privacy Declaration of Hotjar under the following link: https://www.hotjar.com/privacy.


Google Ads
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.

The use of Google Ads is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing the operator’s services and products as effectively as possible.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

 

Use of SalesViewer® technology:

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

 

Google Conversion-Tracking

This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.

We use Google Conversion Tracking on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the analysis of the user patterns with the aim of optimizing both, the operator’s web presentation and advertising. If a respective declaration of consent was requested (e.g., concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time.

For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en

 

Mouseflow (Mouseflow ApS)

This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (only with a pseudonymised IP address). This creates a log of mouse movements and clicks with the intention of randomly playing back individual website visits and deriving potential improvements for the website from them. The processed information will not be passed on to third parties.
All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. Without this consent, Mouseflow will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
In order to permanently object to the data collection and creation of pseudonymised user profiles and the setting of cookies for the future, you can alternatively download and install an opt-out cookie from the website listed below: www.mouseflow.de/opt-out/
You can see more information and Mouseflow's privacy policy here: https://mouseflow.com/privacy/

 

LeadRebel

We analyze our visitor data with the help of an external service provider. For this purpose, we pass on the data obtained from the use of IP research to Pulserio AG, Wassergrabe 3 6210 Sursee, Switzerland, https://leadrebel.io/. Categories of data subjects are website visitors and users of our web services. The purpose of the processing is the evaluation of the data obtained from IP research for lead generation. If the visitors to our site are asked for their consent, the legal basis for the processing of the data is consent within the meaning of art. 6 paragraph 1 lit. a GDPR. Otherwise, the data will be processed on the basis of our legitimate interest within the meaning of art. 6 Paragraph 1 lit. f GDPR processed. Our legitimate interest lies in lead generation by analyzing the data obtained with the help of IP research. On this page: https://leadrebel.io/optout you have an opt-out option. In the event of an opt-out, your data will no longer be recorded by LeadRebel.

 

6. Newsletter

Newsletter data
If you want to receive the newsletter offered on the web site, we need from you an e-mail address as well as information that allows us to check that you are the owner of the e-mail address given and consent to receive the newsletter. Other data are not collected or are only collected on a voluntary basis. We use these data to send the information requested and do not pass the data onto third parties.

At any time you can withdraw your consent to the storage of the data, the e-mail address as well as its usage for sending the newsletter, for instance using the "Unsubscribe" link in the newsletter. The legality of data processing that has already occurred remains unaffected.

Your data saved in our systems for the purpose of receiving the newsletter are saved by us to send the newsletter until you unsubscribe from the newsletter. For the purpose of the verification of consent, we save the data stored until 31 March of the fourth calendar year after sending the last newsletter. Data saved in our systems for other purposes remain unaffected.

The legal basis for the processing for the purpose of sending the newsletter is art. 6 para. 1 lit. a GDPR. The legal basis for the processing for the purpose of the verification of consent is art. 6 para. 1 lit. c combined with art. 5 para. 2 GDPR, art. 7 para. 1 GDPR and art. 24 para. 1 GDPR as well as art. 6 para. 1 lit. f GDPR. The legitimate interest in processing based on art. 6 para. 1 lit. f GDPR is defence against legal claims.

 

7. APPLICANT DATA

Job Applications

We offer website visitors the opportunity to submit job applications to us (e.g., via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 GDPR and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship in our data processing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6(1)(a) GDPR) or if statutory data retention requirements preclude the deletion.

Admission to the applicant pool

If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Admission to the applicant pool is based exclusively on your express agreement (Art. 6(1)(a) GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.

9. Timeliness and amendment of this privacy policy
Date: 17. January 2021.

Menu